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DETAILED ACTION 
Response to Arguments 

1 . Applicants arguments filed 1 1/1 3/06 have been fully considered but they are not 
persuasive. 

2. With regard to claim 31 , and Applicant's assertion that Rajasekharan does not 
disclose "wherein the validation key embedded data stream is to ensure that the data 
stream includes content intended for an associated destination", the Examiner 
respectfully disagrees. Applicant's own citation of Rajasekharan clearly states that 
Rajasekharan discloses a method for secure streaming, and that "Secure streaming 
provides protection against unauthorized use of digital content 1 (Rajasekharan, Abstract; 
Page 8 of Remarks). By protecting against unauthorized use of the content through 
embedding authorization data including PlayerlD's (at least Col 4, Lines 24-55), 
Rajasekharan's validation key "is to ensure that the data stream contains content 
intended for an associated destination" (the content will not play on a player unless it is 
intended for that player, based on the PlayerlD). When combined with Xie and 
Abdulhayoglu, a validation key embedded data stream is created to serve this purpose. 

3. Furthermore, Applicant's newly added limitation "wherein the validation key 
embedded data stream is to ensure that the data stream includes content intended for 
an associated destination" is not given patentable weight because it simply expresses 
the intended result of the process step positively recited (the embedding step). 
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The Examiner recommends amending the claim to describe how the validation 
key is used to ensure that the data stream includes particular content. 

In the interest of expedited prosecution, this limitation has been rejected below 
as though it were given patentable weight. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 31-36,39-41 ,44-46, 48-51 , and 58-60 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Rajasekharan et al. (US 6,480,961) in view of Xie et al. (US 
6,606,393) in further view of Abdulhayoglu (US 2004/0030784). 

6. With regard to claim 31 , Rajasekharan discloses a method for validating a data 
stream comprising: 

generating a unique validation key associated with the data stream (authorization 
data), the unique validation key to map the data stream with a source (source indicator 
maps stream to source)(Col 5, Lines 28-38), wherein the unique validation key is 
generated based on an encryption key (digital signature/source indicator is generated 
using DSA/RSA)(Col 4, Lines 25-27 and Col 5, Lines 27-29); 
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. generating the data stream (data stream is sent)(Col 4, Lines 51-55); 
storing the unique validation key (authorization data is stored at server)(Col 4, 
Lines 8-12); 

wherein the validation key is to ensure that the data stream includes content 
intended for an associated destination (Col 5, Lines 35-43); and 

sending the unique validation key (authorization data is sent to client)(Col 4, Line 
6) and data stream (Col 4, Lines 51-55) to the associated destination (playback device). 
Rajasekharan fails to disclose embedding the validation key in the data stream to form a 
validation key embedded data stream or that the validation key is generated based on a 
URL 

Xie discloses several methods of authenticating digital messages that are old 
and well known in the art. Xie further discloses that embedding validation information 
within the digital stream is advantageous since removal of embedded information may 
destroy or alter the content. This provides better security that sending the validation 
data outside of the data stream (Col 1 , Lines 27-45). 

Abdulhayoglu discloses a similar system for verifying the source of received data 
based on a digital certificate included with the data. Abdulhayoglu teaches use of a 
digital certificate that includes a URL of the data source fl|84). This allows the recipient 
to verify that the source of the data is at that URL. This would have been an 
advantageous addition to the system disclosed by Rajasekharan, since it would have 
allowed a recipient of the data stream to be assured that the URL from which the data 
stream is coming is the URL that was requested. 
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Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate the validation key based on the URL of the 
data source and embed the validation key in the data stream to form a validation key 
embedded data stream in order to provide enhanced security since embedded 
validation keys would be much more difficult to remove from the data stream without 
corrupting it, ensuring that the source and URL could be validated by the recipient of the 
data stream. 

7. With regard to claim 32, Rajasekharan further discloses that the source 
comprises one or more of a source of audio information, a source of video information, 
and a source of audio-video information and the URL (Col 4, Lines 1-2). 

8. With regard to claim 33, Rajasekharan further discloses that generating the 
validation key associated with the data stream comprises generating the unique 
validation key in response to a request for data to be retrieved from the URL. Since the 
source of the unique validation key is a server computer accessed via the Internet (Col 
4, Lines 6-9), it must be accessed via a URL prior to sending the authorization data to 
the client. 

9. With regard to claim 34, Rajasekharan further discloses that generating the 
unique validation key associated with the data stream, said unique validation key to 
map the data stream with a source, comprises: generating the unique validation key 
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(Col 5, Lines 28-38) and sending the unique validation key to the associated destination 
(Col 4, Line 6). 

10. With regard to claim 35, Rajasekharan further discloses that the data stream 
comprises one or more of encoded video information, encoded audio information, 
encoded audio-video information, and encoded information from the URL (Col 4, Lines 
1-2). 

1 1 . With regard to claim 36, Rajasekharan further discloses receiving the validation 
key at the associated destination (Col 4, Line 6); sampling the unique validation key 
embedded data stream at the destination to detect the unique validation key (validation 
key is detected and checked) (Col 4, Lines 24-28). 

12. With regard to claim 39, Rajasekharan discloses: 

receiving a unique validation key (authorization data) associated with the data 
stream (Col 4, Line 4), the unique validation key to map the data stream with a source 
(Col 5, Lines 28-38), wherein the unique validation key is generated based on an 
encryption key (digital signature is generated using DSA/RSA)(Col 4, Lines 25-27 and 
Col 5, Lines 27-29); 

receiving the data stream (Col 4, Lines 51-52); 

detecting the unique validation key and validating the data stream in response to 
detecting the validation key (key is detected and checked)(Col 4, Lines 24-28), wherein 
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the validation key is to ensure that the data stream includes content intended for an 
associated destination (Col 5, Lines 35-43). The validation key must be stored since the 
client receives it and analyzes it. Rajasekharan fails to disclose that the validation key is 
embedded in the data stream or that the validation key is generated based on a URL. 

Xie discloses several methods of authenticating 6 digital messages that are old 
and well known in the art. Xie further discloses that embedding validation information 
within the digital stream is advantageous since removal of embedded information may 
destroy or alter the content. This provides better security that sending the validation 
data outside of the data stream (Col 1 , Lines 27-45). 

Abdulhayoglu discloses a similar system for verifying the source of received data 
based on a digital certificate included with the data. Abdulhayoglu teaches use of a 
digital certificate that includes a URL of the data source flj84). This allows the recipient 
to verify that the source of the data is at that URL. This would have been an 
advantageous addition to the system disclosed by Rajasekharan, since it would have 
allowed a recipient of the data stream to be assured that the URL from which the data 
stream is coming is the URL that was requested. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate the validation key based on the URL of the 
data source and embed the validation key in the data stream in order to provide 
enhanced security since embedded validation keys would be. much more difficult to 
remove from the data stream without corrupting it, ensuring that the source and URL 
could be validated by the recipient of the data stream. 
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13. With regard to claim 40, Rajasekharan further discloses that the source 
comprises one or more of a source of audio information, a source of video information, 
and a source of audio-video information and the URL (Col 4, Lines 1-2). 

14. With regard to claim 41 , Rajasekharan further discloses requesting data to be 
retrieved from the URL. Since the source of the validation key is a server computer 
accessed via the Internet (Col 4, Lines 6-9), it must be accessed via a URL prior to 
sending the authorization data to the client. 

15. Claims 42,43,52 and 53 are rejected under 35 U.S.C. 103(a) as being 
unpatentable Rajasekharan et al. (US 6,480,961 ) in view of Xie et al. (US 6,606,393) in 
further view of Willis, Jr. et al. (US 6,738,815). 

16. With regard to claims 42,43,52, and 53, while the system disclosed by 
Rajasekharan in view of Xie shows substantial features of the claimed invention 
(discussed above), it fails to disclose generating an error if the unique validation key is 
not detected in the data stream or writing the error to a log file. Rajasekharan does 
disclose checking the validation key to determine is the source is an authorized source 
(Col 4, Lines 24-28). Xie discloses that removing embedded validation keys may 
destroy or at least damage the underlying data (Xie, Col 1 , Lines 36-36) 

Willis, Jr. teaches the creation of a log file at a client and writing errors to the log 
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file when they occur (Col 6, Lines 44-50). Willis, Jr. further discloses that the logs can 
be uploaded to a server as well (Col 6, Lines 49-50). This would have been an 
advantageous addition to the system disclosed by Rajasekharan in view of Xie since 
generating an error and storing it in a log file would have allowed the server, client, 
and/or users to be notified that the validation key was not found, and that the data may 
be invalid. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate an error and write it to a log file if the validation 
data is not detected in the data stream. This would have allowed the server, client, 
and/or users to be notified that the validation keys were not found and that the data may 
be invalid. 

17. Claims 44-46 and 48 are rejected for the same reasons cited above regarding 
claims 31,32,35, and 33, respectively, since they recite substantially identical subject 
matter. A database is required in order to store the validation key at the server, and is 
therefore inherent. A processor and memory are inherent components of both the 
server and client devices since they are computers. 

18. With regard to claim 49, Rajasekharan discloses a system comprising: 

a key generation module (KGM) to generate a unique validation key associated 
with a data stream (authorization data), the unique validation key to map the data 
stream with a source (Col 5, Lines 28-38), wherein the unique validation key is 
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generated based on an encryption key (digital signature is generated using 
DSA/RSA)(Col 4, Lines 25-27 and Col 5, Lines 27-29); 

an associated client to receive the validation key and data stream (Col 4, Line 6), 
wherein the validation key is to ensure that the data stream includes content intended 
for the associated client (Col 5, Lines 35-43); 

and a database coupled with the associated client to store the unique validation 
key (client stores validation key to perform periodic checks) (Col 4, Line 65 to Col 5, 
Line 3). Rajasekharan fails to disclose embedding the validation key in the data stream 
to form a validation key embedded data stream or that the validation key is generated 
based on a URL. 

Xie discloses several methods of authenticating digital messages that are old 
and well known in the art. Xie further discloses that embedding validation information 
within the digital stream is advantageous since removal of embedded information may 
destroy or alter the content. This provides better security that sending the validation 
data outside of the data stream (Col 1 , Lines 27-45). 

Abdulhayoglu discloses a similar system for verifying the source of received data 
based on a digital certificate included with the data. Abdulhayoglu teaches use of a 
digital certificate that includes a URL of the data source (1184). This allows the recipient 
to verify that the source of the data is at that URL. This would have been an 
advantageous addition to the system disclosed by Rajasekharan, since it would have 
allowed a recipient of the data stream to be assured that the URL from which the data 
stream is coming is the URL that was requested. 
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Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate the validation key based on the URL of the 
data source and embed the validation key in the data stream in order to provide 
enhanced security since embedded validation keys would be much more difficult to 
remove from the data stream without corrupting it, ensuring that the source and URL 
could be validated by the recipient of the data stream. 

19. With regard to claim 50, Rajasekharan further discloses that the source 
comprises one or more of a source of audio information, video information, audio-video 
information and the URL (Col 4, Lines 1-2). 

20. With regard to claim 51 , Rajasekharan further discloses that the associated client 
requests data to be retrieved from the URL. Since the source of the data is a server 
computer accessed via the Internet (Col 4, Lines 6-9), it must be accessed via a URL 
prior to sending the data stream to the client. 

21 . Claims 58 and 60 are rejected for the same reasons cited above regarding 
claims 31 and 35, respectively, since they recite substantially identical subject matter. A 

4 

machine-readable medium containing instructions to perform the methods is inherent in. 
the system disclosed by Rajasekharan since the system is implemented using 
computers. 
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22. With regard to claim 59, Rajasekharan further discloses sampling the data 
stream to detect the unique validation key embedded in the data stream (Col 4, Lines 
24-28). 

Conclusion 

23. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aaron Strange whose telephone number is 571-272- 
3959. The examiner can normally be reached on M-F 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Glen Burgess can be reached on 571-272-3949. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained.from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

AS 

2/1/07 




